Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: N+AY9/aSqwSmALOcBd0U04t//6Mzmn+4sMHeAzaeQmg=
Subject key identifier: F0:15:7A:AD:1D:A1:8A:9E:AF:65:7E:BA:CE:03:18:92:EC:89:BA:58
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 01974B560C253CA95D712112F0908A325087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0C8C
Signing time: Sat 07 Jun 2025 17:00:19 +0000
Manifest this update: Sat 07 Jun 2025 17:00:19 +0000
Manifest next update: Sun 08 Jun 2025 17:00:19 +0000
Files and hashes: 1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=)
2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=)
3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: 8fwHmfqx0tmo4HIESuFQPRYCwZAwLuiCSsrY2TUQyZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:0c:25:3c:a9:5d:71:21:12:f0:90:8a:32:50:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Jun 7 17:00:19 2025 GMT
Not After : Jun 8 17:00:19 2025 GMT
Subject: CN=f0157aad1da18a9eaf657ebace031892ec89ba58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:34:dd:90:00:14:c6:10:7e:65:3d:22:47:
c0:5a:b1:1e:05:e9:30:02:60:c2:59:25:56:0c:a3:
c9:aa:fa:c8:2c:ba:62:71:2c:ef:f6:8b:bd:5b:a3:
31:43:aa:8b:ef:d1:b6:d4:66:ae:85:39:52:a1:a9:
39:96:ba:b0:15:ba:20:e2:d2:e3:84:b1:59:46:c7:
0c:47:5c:6b:1c:4b:b1:ad:d1:e4:86:c3:6a:9b:7a:
40:9d:b3:68:23:b2:98:f9:02:1a:fa:5d:e4:f2:b2:
17:c2:0b:83:84:de:53:a2:b7:49:b8:ae:13:0c:a9:
84:0a:84:f3:05:1b:e4:84:59:f2:37:4f:cb:a7:79:
51:f7:f2:cf:69:a9:d7:13:f8:18:06:06:b1:47:e1:
13:c8:e0:50:44:ca:f3:50:b1:66:9e:58:db:b2:7c:
c0:06:7e:78:2e:2f:8f:69:91:7e:11:24:3d:a5:55:
84:9f:16:01:33:01:93:3e:37:da:f2:77:c5:b7:44:
f5:ab:2d:5b:c9:5d:e0:1d:ba:0a:4c:e3:94:08:7b:
19:e3:03:6b:7e:a1:17:db:82:fd:05:95:28:4a:21:
12:6a:a1:bc:49:36:61:68:46:d9:e5:e2:7a:99:33:
f7:ee:82:40:14:64:eb:91:14:60:f9:ee:a4:2c:3c:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:15:7A:AD:1D:A1:8A:9E:AF:65:7E:BA:CE:03:18:92:EC:89:BA:58
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:52:8e:25:0e:89:fd:e0:d8:de:66:27:cb:ef:ea:9e:7f:
f5:49:36:db:3b:8f:d6:66:93:af:14:01:f7:6f:80:1c:af:c7:
fe:8b:3f:b8:fa:be:ed:6f:ee:b6:ba:03:c1:73:84:d4:ff:75:
7a:b3:d2:73:01:05:4d:75:17:c1:16:39:a5:07:7d:c3:eb:0f:
0e:26:7e:5f:60:21:e8:03:5f:f4:a0:b0:a2:48:a7:50:c8:74:
28:6b:75:2f:71:8f:6d:f0:02:a6:93:fa:f1:f1:8d:aa:16:38:
43:2b:96:2b:e6:d4:c6:9f:67:f0:fc:2a:cc:0f:35:2b:4f:2c:
e2:0a:07:b6:1c:ec:b1:2c:09:e9:5a:d9:eb:99:4a:97:f5:50:
37:a3:39:21:8e:15:6d:c0:d4:57:8a:f2:f7:bf:8a:f5:96:f5:
7d:95:e5:20:4c:19:d9:8d:23:72:bc:93:6e:5b:80:8f:34:38:
e4:6b:66:82:b7:38:fa:b4:2e:8a:bf:9b:96:5a:c2:8e:76:1c:
20:de:a5:13:6f:45:28:91:5c:80:6f:85:47:b2:1c:56:fe:6b:
a2:02:7a:5c:00:87:9a:51:be:56:73:01:b9:a7:8e:04:1d:58:
18:c6:66:d0:50:9d:8a:2b:9b:73:f8:b9:a4:11:89:d6:ad:2a:
f7:5f:16:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:46:55 2025 by rpki-client